`istio-csr` has a controller to copy the CA certificate used for signing the Istio certificates to required namespaces, which will be used by the istio proxy sidecars for mTLS verification. `--configmap-namespace-selector` arg must be set with required value.

Currently `--configmap-namespace-selector` arg is not passed, and the CA certificate is copied to every namespace in the cluster, even to the namespaces not having `istio-injection` label.

Acceptance Criteria:

• Add relevant UTs and e2e's.
• When the param is not set, don't include the same in the arg list.